7.2Hoch

CVE-2025-6965Integer Truncation on SQLite

SQLite SQLite; Siemens RUGGEDCOM CROSSBOW Station Access Controller (SAC); Siemens SIDIS Prime Veröffentlicht: (vor 1 Jahr)

Beschreibung

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

Schwachstellentyp (CWE): CWE-197

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
apple ipados < 26.0.0
apple iphone os < 26.0.0
apple macos < 26.0.0
apple tvos < 26.0.0
apple visionos < 26.0.0
apple watchos < 26.0.0
siemens ruggedcom crossbow < 5.8
Siemens RUGGEDCOM CROSSBOW Station Access Controller (SAC) < V5.8
Siemens SIDIS Prime < V4.0.800
SQLite SQLite < 3.50.2

Referenzen und Patches

CPE-Treffer (NVD) (9)

  • cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:* < 3.50.2
  • cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* < 26.0.0
  • cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* < 26.0.0
  • cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* < 26.0.0
  • cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* < 26.0.0
  • cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:* < 26.0.0
  • cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* < 26.0.0
  • cpe:2.3:a:siemens:ruggedcom_crossbow:*:*:*:*:*:*:*:* < 5.8
  • cpe:2.3:a:siemens:sidis_prime:*:*:*:*:*:*:*:* < 4.0.800